Getting Started in OT/ICS Cybersecurity 2026 (Module 3): PLCs, HMIs, and Others Explained

Getting Started in OT/ICS Cybersecurity 2026 (Module 3): PLCs, HMIs, and Others Explained

by Mike Holcomb

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Mike Holcomb 👥 27K 📅 July 13, 2026 ⏱ 118 min 👁 2K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

PLCHMIDCSPurdue ModelTriton

Summary

This video is the third module of a course on OT/ICS cybersecurity, aimed at IT professionals transitioning to OT security. The instructor, Mike Holcomb, explains the lifecycle of an industrial facility, from feasibility studies to operations and maintenance, and introduces key engineering terms such as owners vs. operators, greenfield vs. brownfield projects, and P&ID drawings. He then details the most common control systems: PLCs, HMIs, DCS, SIS, RTUs, and VFDs, explaining their functions and security implications. The video includes a case study of the 2017 Triton attack, which targeted safety systems, and emphasizes the importance of not connecting SIS to the main OT network. It also covers the Expanded Purdue Model, from Level 0 (physical processes) to Level 5 (enterprise network), and discusses how attackers exploit default credentials. The instructor provides practical advice on factory acceptance testing and site acceptance testing, and demonstrates how to use GenAI tools for reverse-engineering HMI layouts. The video concludes with a preview of a virtual lab environment (LabShock) for hands-on practice.

167 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable foundational knowledge for IT professionals entering OT security, explaining complex concepts in an accessible manner. The argumentation is solid, drawing on real-world examples and the author’s experience in the field. The explanation of the Purdue Model and the Triton attack is particularly effective in illustrating the importance of securing OT environments. However, the video is introductory and does not delve deeply into advanced topics, and some claims lack external verification.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates good scientific rigor by referencing the Purdue Model and the Triton attack, which are well-documented in the industry. However, it does not cite specific academic or official sources, relying instead on the author’s expertise. The title accurately reflects the content, which is a tutorial on OT/ICS fundamentals. The description provides links to course materials and a GitHub repository for the LabShock environment, which are useful for further learning.

160 words

Title / Content Match

The title accurately reflects the content, which focuses on introducing PLCs, HMIs, and other OT/ICS components for beginners.

Quality & Reliability

8/10

The video provides a structured, educational overview of OT/ICS fundamentals, drawing on the author's professional experience in engineering and cybersecurity. It includes a detailed case study of the Triton attack and references to industry models like the Purdue Model. However, it is primarily instructional and lacks peer-reviewed sources or formal citations, and some claims are presented without external verification.

Chapters

Cited Sources

Concurring Sources

  • NIST SP 800-82 — Provides guidelines for securing ICS, aligning with the video's recommendations.

Contribution & Novelties

The video offers a comprehensive introduction to OT/ICS cybersecurity, bridging the gap between IT and OT for newcomers. It provides a clear explanation of the Purdue Model and highlights the importance of safety systems (SIS) with a real-world attack case study. The inclusion of a virtual lab (LabShock) adds practical value.

Pour aller plus loin :

  • Purdue Model — Reference architecture for industrial control systems.
  • Triton Malware — Details on the 2017 attack on safety systems.
  • NIST SP 800-82 — Guide to Industrial Control Systems Security.

86 words

Radar Profile

The radar profile shows high scores in information quantity and technical level, indicating a content-rich tutorial. The lower score in reliability suggests that while the information is accurate, it relies on the author's expertise rather than formal citations. Overall, the video is a solid educational resource for beginners.

Reliability 7/10

💬 No comments were provided for analysis.